<!--

    Copyright (c) 2005, 2018 Oracle and/or its affiliates. All rights reserved.
    Portions Copyright &#169; [2017-2022] Payara Foundation and/or affiliates.

    This program and the accompanying materials are made available under the
    terms of the Eclipse Public License v. 2.0, which is available at
    http://www.eclipse.org/legal/epl-2.0.

    This Source Code may also be made available under the following Secondary
    Licenses when the conditions for such availability set forth in the
    Eclipse Public License v. 2.0 are satisfied: GNU General Public License,
    version 2 with the GNU Classpath Exception, which is available at
    https://www.gnu.org/software/classpath/license.html.

    SPDX-License-Identifier: EPL-2.0 OR GPL-2.0 WITH Classpath-exception-2.0

-->

<p><a id="ref-httpserviceprops" name="ref-httpserviceprops"></a><a id="GHWEB00009" name="GHWEB00009"></a></p>

<h4><a id="sthref108" name="sthref108"></a><a id="sthref109" name="sthref109"></a>Properties Specific to the HTTP Service</h4>
<a name="BEGIN" id="BEGIN"></a>
<p>The following additional properties are available for the HTTP service. If you specify these properties, they apply to all <a href="ref-group-networklisteners.html">Network Listeners</a>.</p>
<dl>
<dt><code>proxyHandler</code></dt>
<dd>
<p>The fully qualified class name of a custom implementation of the <code>com.sun.appserv.ProxyHandler</code> abstract class, which allows a back-end Payara Server instance to retrieve information about the original client request that was intercepted by an SSL-terminating proxy server (for example, a load balancer). An implementation of this abstract class inspects a given request for the custom request headers through which the proxy server communicates the information about the original client request to the Enterprise Server instance, and returns that information to its caller.</p>
<p>The default implementation reads the client IP address from an HTTP request header named <code>Proxy-ip</code>, the SSL <code>keysize</code> from an HTTP request header named <code>Proxy-keysize</code>, and the SSL client certificate chain from an HTTP request header named <code>Proxy-auth-cert</code>. The <code>Proxy-auth-cert</code> value must contain the BASE-64 encoded client certificate chain without the <code>BEGIN CERTIFICATE</code> and <code>END CERTIFICATE</code> boundaries and with <code>\n</code> replaced with <code>% d% a</code>.</p>
<p>This setting is used only if the Auth Pass Through checkbox for the network listener protocol's HTTP page is set to true.</p>
</dd>
<dt><code>connectionTimeout</code></dt>
<dd>
<p>Specifies the number of seconds that network listeners wait, after accepting a connection, for the request URI line to be presented. The default value is 30.</p>
</dd>
</dl>


<small>Copyright &#169; 2005, 2017, Oracle and/or its affiliates. All rights reserved. <a href="docinfo.html">Legal Notices</a></small>
<small>Portions Copyright &#169; [2017-2020] Payara Foundation and/or affiliates.</small>
